fastmcp/docs
Jeremiah Lowin c35fa5b9e4
[3.x] Require a startup-URL session for the fastmcp dev apps preview (#5418)
Backports `security/dev-apps-preview-server` from main. The `fastmcp dev apps` UI runs as a session started from the printed startup URL, checks Host and origin, opens only launches the picker created, sandboxes tool UI resources in an opaque origin, escapes picker errors, and starts the MCP server with `FASTMCP_HTTP_HOST_ORIGIN_PROTECTION=auto` unless that variable is set. Behavior and compatibility effects match main.

Co-authored-by: Bill Easton <williamseaston@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
2026-10-04 10:51:29 -04:00
..
.cursor/rules Clean up parameter documentation 2025-06-22 20:59:53 -04:00
apps [3.x] Require a startup-URL session for the fastmcp dev apps preview (#5418) 2026-10-04 10:51:29 -04:00
assets Animated (#3231) 2026-02-19 11:56:51 -05:00
cli Add fastmcp-remote bridge package (#4208) 2026-05-23 10:04:21 -04:00
clients feat(remote): add --verify flag for TLS certificate verification (#4369) 2026-06-24 12:09:22 -04:00
community Normalize repo references to PrefectHQ/fastmcp casing (#3218) 2026-02-18 14:51:18 -05:00
css Update docs banner and fix mobile layout 2026-03-03 14:34:49 -05:00
deployment [3.x] Apply Host/Origin protection settings to the SSE transport (#5428) 2026-10-04 09:13:29 -04:00
development Add fastmcp-slim for client-only installs (#4122) 2026-05-11 17:13:21 -04:00
getting-started Move pip upgrade recovery into a Troubleshooting section (#4219) 2026-05-22 21:13:19 -04:00
integrations Hugging Face Auth Integration (#4385) 2026-07-08 20:27:44 -04:00
more [3.x] Apply Host/Origin protection settings to the SSE transport (#5428) 2026-10-04 09:13:29 -04:00
patterns Add fastmcp-slim for client-only installs (#4122) 2026-05-11 17:13:21 -04:00
public/schemas/fastmcp.json chore: Update fastmcp.json schema (#1955) 2025-09-29 20:12:24 -04:00
python-sdk chore: Update SDK documentation (#4427) 2026-07-05 19:16:03 -04:00
servers [3.x] Keep $ref pointers when inlining would produce an oversized schema (#5422) 2026-10-04 10:39:39 -04:00
snippets Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
tutorials Fix broken code examples in docs (#3869) 2026-04-12 12:53:04 -04:00
v2 [3.x] Resolve injected tools through the server's tool lookup (#5432) 2026-10-04 10:39:55 -04:00
.ccignore Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327) 2025-08-01 17:06:55 -04:00
changelog.mdx Docs: add v3.4.7 changelog entries (#4810) 2026-08-10 17:07:36 -04:00
docs.json Hugging Face Auth Integration (#4385) 2026-07-08 20:27:44 -04:00
fastmcp-analytics.js [codex] Add FastMCP docs telemetry (#3727) 2026-03-31 19:32:09 -04:00
prefab-demo-payloads.js Fix docs app demo iframe assets (#4194) 2026-05-20 13:18:45 -04:00
python-sdk-pages.json chore: Update SDK documentation (#4360) 2026-06-27 10:36:03 -04:00
unify-intent.js Add tag to deployment pages (#3624) 2026-03-25 11:39:25 -04:00
updates.mdx Docs: add v3.4.7 changelog entries (#4810) 2026-08-10 17:07:36 -04:00
v2-banner.js Update docs for 3.0 GA release (#3216) 2026-02-18 14:29:28 -05:00
v2-navigation.json chore: split v2 docs navigation into separate file (#3762) 2026-04-04 21:17:39 -04:00